CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- linux, linux kernel +1 morenet: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error7.8 High
- linux, linux kernel +1 moreHID: hid-steam: Fix use-after-free when detaching device7.8 High
- linux, linux kernel +1 moreppp: Fix KMSAN uninit-value warning with bpf5.5 Medium
- linux, linux kernel +1 morenet: ethtool: netlink: Allow NULL nlattrs when getting a phy_device5.5 Medium
- linux, linux kernel +1 morevlan: enforce underlying device type7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moresched/fair: Fix potential memory corruption in child_cfs_rq_on_list7.8 High
- linux, linux kernel +1 moreusb: typec: ucsi: Fix NULL pointer access5.5 Medium
- linux, linux kernel +1 moreusb: renesas_usbhs: Flush the notify_hotplug_work5.5 Medium
- linux, linux kernel +1 moreusb: atm: cxacru: fix a flaw in existing endpoint checks5.5 Medium
- linux, linux kernel +1 morecdx: Fix possible UAF error in driver_override_show()7.0 High
- linux, linux kernel +1 moreslimbus: messaging: Free transaction ID in delayed interrupt scenario7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()5.5 Medium
- linux, linux kernel +1 moregpio: rcar: Use raw_spinlock to protect register access5.5 Medium
- linux, linux kernel +1 moredrm/imagination: avoid deadlock on fence release5.5 Medium
- linux, linux kernel +1 morewifi: cfg80211: regulatory: improve invalid hints checking5.5 Medium
- linux, linux kernel +1 morewifi: nl80211: reject cooked mode if it is set along with other flags5.5 Medium
- linux, linux kernel +1 moreNFS: fix nfs_release_folio() to not deadlock via kcompactd writeback5.5 Medium
- linux, linux kernel +1 moremm: memory-failure: update ttu flag inside unmap_poisoned_folio5.5 Medium
- linux, linux kernel +1 morewifi: iwlwifi: mvm: clean up ROC on failure7.6 High
- linux, linux kernel +1 morewifi: iwlwifi: limit printed string from FW file7.1 High
- linux, linux kernel +1 morecaif_virtio: fix wrong pointer check in cfv_probe()5.5 Medium
- linux, linux kernel +1 moremctp i3c: handle NULL header address5.5 Medium
- linux, linux kernel +1 moreacpi: typec: ucsi: Introduce a ->poll_cci method5.5 Medium
- linux, linux kernel +1 moreRDMA/bnxt_re: Add sanity checks on rdev validity7.8 High
- linux, linux kernel +1 moreNFSv4: Fix a deadlock when recovering state on a sillyrenamed file7.5 High
- linux, linux kernel +1 moretracing: Fix bad hist from corrupting named_triggers list7.8 High
- linux, linux kernel +1 moreftrace: Avoid potential division by zero in function_stat_show()5.5 Medium
- linux, linux kernel +1 moresched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance()5.5 Medium
- linux, linux kernel +1 morefuse: revert back to __readahead_folio() for readahead7.8 High
- linux, linux kernel +1 moreperf/core: Order the PMU list to fix warning about unordered pmu_ctx_list4.7 Medium
- linux, linux kernel +1 morenet: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC5.5 Medium
- the-commit-company ravenRaven allows Remote Code Execution due to improper validation8.1 High
- yeswikiPath Traversal allowing arbitrary read of files in Yeswiki8.6 High
- open-emr openemrOpenEMR allows XSS in Patient Image feature7.0 High
- reputeinfosystems bookingpressWordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability7.6 High
- sami ahmed siddiqui json structuring markupWordPress JSON Structuring Markup plugin <= 0.1 - CSRF to Stored XSS vulnerability7.1 High
- profitshare.ro wp profitshareWordPress WP Profitshare Plugin <= 1.4.9 - CSRF to Stored XSS vulnerability7.1 High
- infoway llc ebook downloaderWordPress Ebook Downloader plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- arrow plugins custom feed for twitterWordPress Arrow Custom Feed for Twitter plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- paulrosen abc notationWordPress ABC Notation Plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- infoway llc ebook downloaderWordPress Ebook Downloader plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gosign – posts slider blockWordPress Gosign – Posts Slider Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mashi simple map no apiWordPress Simple Map No Api plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpexperts.io wp multistore locatorWordPress WP Multi Store Locator Plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- zookatron mybookprogress by stormhill mediaWordPress MyBookProgress plugin <= 1.0.8 - Broken Access Control vulnerability4.3 Medium
- repuso social proof testimonials and reviews by repusoWordPress Social proof testimonials and reviews by Repuso plugin <= 5.21 - Broken Access Control vulnerability4.3 Medium
- daniel floeter hyperlink group blockWordPress Hyperlink Group Block plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp cms ninja norse rune oracle pluginWordPress Norse Rune Oracle Plugin plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webinarpressWordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- Show moreLoading…